Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS24875.roa
File:                     AS24875.roa (raw, json)
Hash identifier:          cKI1rSvgElBS/OjDheGZEvk1MHHyffdXeuTUyECZ6/k=
Subject key identifier:   95:F4:1A:9A:E4:FE:B3:38:FD:57:B0:41:B2:B2:0C:C7:60:79:7B:03
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0148B942DD8E37641F275D252E920D2F504B5FAD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS24875.roa
Signing time:             Mon 28 Nov 2022 12:18:16 +0000
ROA not before:           Mon 28 Nov 2022 12:13:16 +0000
ROA not after:            Mon 27 Nov 2023 12:18:16 +0000
asID:                     24875
IP address blocks:        92.119.34.0/24 maxlen: 24
                          179.61.136.0/24 maxlen: 24
                          181.215.178.0/24 maxlen: 24
                          191.96.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:b9:42:dd:8e:37:64:1f:27:5d:25:2e:92:0d:2f:50:4b:5f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:16 2022 GMT
            Not After : Nov 27 12:18:16 2023 GMT
        Subject: CN=95F41A9AE4FEB338FD57B041B2B20CC760797B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:f4:27:9e:8a:ce:59:79:cf:d6:58:9d:36:
                    bd:0e:1a:3a:31:76:53:90:1b:db:87:e3:9f:d9:6f:
                    22:bb:7b:dd:f3:10:89:c5:60:e9:1f:7d:61:8c:09:
                    8d:24:d2:6e:05:77:31:e7:81:b8:e8:28:40:04:95:
                    ad:d1:af:77:c7:08:38:e5:e5:fd:fb:93:d7:14:6f:
                    fe:6e:ea:b6:48:62:17:53:44:59:80:15:36:7c:29:
                    7e:8d:58:1a:cc:24:7c:b1:1c:93:03:18:57:c9:b8:
                    0e:72:06:b8:30:13:e9:5b:ee:5c:37:ee:76:e0:24:
                    e4:d8:2b:67:aa:f4:70:d4:63:d7:10:23:69:53:45:
                    10:0c:ff:9b:10:2a:b6:93:4e:07:fd:c5:8e:e2:dc:
                    0a:c4:df:42:82:5d:ed:5e:e3:a8:a2:32:24:93:99:
                    40:86:7f:91:a1:bf:7d:93:c1:24:fc:5e:57:4f:f2:
                    8d:af:99:76:d2:44:84:61:13:13:c0:be:e0:f2:c4:
                    32:54:19:c9:65:98:0b:84:cb:ba:ec:bc:ee:23:e1:
                    71:d1:7b:ef:f5:63:0a:dd:7d:94:a5:bb:64:6e:8c:
                    09:86:d3:33:a0:2a:a8:29:51:14:c6:04:36:da:11:
                    14:cf:6a:e7:82:89:65:f6:48:86:27:27:12:4c:8f:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:1A:9A:E4:FE:B3:38:FD:57:B0:41:B2:B2:0C:C7:60:79:7B:03
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS24875.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.34.0/24
                  179.61.136.0/24
                  181.215.178.0/24
                  191.96.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:6b:5f:6c:37:2c:98:fc:b3:ce:aa:d4:21:df:bc:ee:1b:
         23:ed:c4:84:ef:db:09:9b:86:d3:3a:f7:43:e2:74:e9:a9:e8:
         51:99:3e:8f:8b:fa:4d:08:1b:01:4f:ae:ce:55:3f:f5:4a:38:
         be:f8:cf:f7:b8:c7:18:cb:43:6d:93:2c:68:a6:4b:f6:11:22:
         f7:72:c5:91:bf:12:79:3a:b4:58:78:25:ec:73:09:4f:88:93:
         e9:b1:b6:fb:40:79:27:95:dc:d7:7c:34:19:87:cb:42:90:a3:
         4d:91:de:68:bc:84:25:84:53:3c:9c:9c:5e:26:46:5d:58:05:
         ec:16:4a:94:1e:29:b6:22:97:bf:4d:d6:fb:50:b9:25:bf:35:
         36:57:1d:a1:55:43:57:00:a2:ed:9c:12:d0:e1:53:08:a9:d5:
         65:ea:15:73:3e:47:9e:c2:66:df:ef:f6:7d:f9:1a:62:00:a0:
         fd:b1:b8:11:bb:20:73:63:16:59:8e:9d:88:63:db:89:b0:6d:
         a0:e1:8f:9d:19:e3:de:a8:75:7d:e0:3a:99:43:b3:26:42:88:
         80:61:5d:6f:88:5e:53:12:4d:13:34:38:a5:97:f7:40:57:2a:
         65:0a:58:3d:cd:06:e3:db:20:be:cf:c4:dc:18:4b:aa:a9:f9:
         4b:d5:68:80
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUAUi5Qt2ON2QfJ10lLpINL1BLX60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTZaFw0yMzExMjcxMjE4MTZaMDMxMTAvBgNV
BAMTKDk1RjQxQTlBRTRGRUIzMzhGRDU3QjA0MUIyQjIwQ0M3NjA3OTdCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSC/QnnorOWXnP1lidNr0OGjox
dlOQG9uH45/ZbyK7e93zEInFYOkffWGMCY0k0m4FdzHngbjoKEAEla3Rr3fHCDjl
5f37k9cUb/5u6rZIYhdTRFmAFTZ8KX6NWBrMJHyxHJMDGFfJuA5yBrgwE+lb7lw3
7nbgJOTYK2eq9HDUY9cQI2lTRRAM/5sQKraTTgf9xY7i3ArE30KCXe1e46iiMiST
mUCGf5Ghv32TwST8XldP8o2vmXbSRIRhExPAvuDyxDJUGcllmAuEy7rsvO4j4XHR
e+/1YwrdfZSlu2RujAmG0zOgKqgpURTGBDbaERTPaueCiWX2SIYnJxJMj1JbAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUlfQamuT+szj9V7BBsrIMx2B5ewMwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyNDg3NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEF
BQcBBwEB/wQiMCAwHgQCAAEwGAMEAFx3IgMEALM9iAMEALXXsgMEAL9gZDANBgkq
hkiG9w0BAQsFAAOCAQEAk4prX2w3LJj8s86q1CHfvO4bI+3EhO/bCZuG0zr3Q+J0
6anoUZk+j4v6TQgbAU+uzlU/9Uo4vvjP97jHGMtDbZMsaKZL9hEi93LFkb8SeTq0
WHgl7HMJT4iT6bG2+0B5J5Xc13w0GYfLQpCjTZHeaLyEJYRTPJycXiZGXVgF7BZK
lB4ptiKXv03W+1C5Jb81NlcdoVVDVwCi7ZwS0OFTCKnVZeoVcz5HnsJm3+/2ffka
YgCg/bG4Ebsgc2MWWY6diGPbibBtoOGPnRnj3qh1feA6mUOzJkKIgGFdb4heUxJN
EzQ4pZf3QFcqZQpYPc0G49sgvs/E3BhLqqn5S9VogA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org